Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/g78z3WTG-8c4vpVsdNu8coU4-Ks.roa
File:                     g78z3WTG-8c4vpVsdNu8coU4-Ks.roa (raw, json)
Hash identifier:          ttVpVll7zxrHGjk71YOHrLiqWx/La4fV1pWTvSFoNfI=
Subject key identifier:   83:BF:33:DD:64:C6:FB:C7:38:BE:95:6C:74:DB:BC:72:85:38:F8:AB
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018AD200938564C887E19F37CB824D205D95
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/g78z3WTG-8c4vpVsdNu8coU4-Ks.roa
Signing time:             Tue 26 Sep 2023 14:59:27 +0000
ROA not before:           Tue 26 Sep 2023 14:59:27 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     207252
IP address blocks:        2a10:cc40:270::/44 maxlen: 48
                          2a10:cc40:270::/48 maxlen: 48
                          2a0e:b107:1199::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:d2:00:93:85:64:c8:87:e1:9f:37:cb:82:4d:20:5d:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Sep 26 14:59:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=83bf33dd64c6fbc738be956c74dbbc728538f8ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a2:f2:6f:5c:b1:ce:24:14:9b:e5:a7:d8:ce:
                    e6:10:42:58:22:f1:74:d3:cb:d9:ed:39:ab:aa:65:
                    08:93:c1:81:d7:a8:bd:24:50:48:24:0a:b8:64:89:
                    ac:e0:a7:c6:af:c5:05:aa:59:01:fd:04:84:53:32:
                    22:a3:6d:52:54:16:e7:c7:db:ea:e2:ce:eb:9b:80:
                    64:b3:af:2c:4b:ed:03:6d:5b:7e:01:2c:28:37:a5:
                    2e:bd:ba:36:bc:d9:05:bc:e8:2f:84:3a:04:c2:58:
                    4b:e7:4c:53:c8:72:e2:d4:d3:fd:85:43:a4:06:f8:
                    0b:62:b6:eb:45:8a:cb:bb:2d:ac:26:28:c7:46:95:
                    b1:b5:94:cd:0c:0e:ee:cf:4d:6d:f0:00:ca:9c:8b:
                    b5:31:68:fd:25:de:2b:88:f6:d5:8a:ee:aa:48:0e:
                    88:dd:06:a9:32:e5:20:07:22:17:46:b3:2f:5c:a4:
                    03:4b:e7:28:cb:2c:67:8d:60:d7:ce:fe:6c:79:68:
                    8c:b1:c8:f9:dd:da:81:43:ea:ac:56:0b:59:ad:a8:
                    b4:77:d8:da:0c:1b:bf:68:13:9c:85:1d:93:e3:b4:
                    4b:a0:89:e1:f6:af:76:c4:fd:f9:57:f2:65:2e:e1:
                    e1:b5:3c:3e:9b:32:35:e9:56:27:a7:94:db:1f:8a:
                    c0:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:BF:33:DD:64:C6:FB:C7:38:BE:95:6C:74:DB:BC:72:85:38:F8:AB
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/g78z3WTG-8c4vpVsdNu8coU4-Ks.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:1199::/48
                  2a10:cc40:270::/44

    Signature Algorithm: sha256WithRSAEncryption
         0f:f7:69:92:1c:18:7a:9d:d0:e2:c0:d3:c0:7c:18:40:87:77:
         03:7f:c8:47:c5:6c:d5:d6:60:27:bb:01:57:eb:2a:df:83:37:
         98:10:0d:84:4a:dc:e7:2f:84:fd:48:f3:a2:52:69:e5:63:ff:
         aa:91:04:52:ff:24:18:e3:c1:98:b5:1b:83:89:c6:69:67:34:
         4f:1c:ed:81:81:86:78:6d:6f:fc:bd:9c:eb:ca:df:39:57:f8:
         0e:a6:c8:5f:8b:cb:dc:a3:ac:fe:91:9e:1a:55:ba:49:12:a5:
         28:fc:b6:7a:e4:19:9e:c8:e6:de:5f:07:a8:89:9a:fc:70:2a:
         06:1b:3a:bf:22:95:53:f0:86:3b:17:17:4a:83:8c:c4:d0:82:
         d6:56:45:d2:12:d4:62:55:ca:04:f5:6c:93:75:9d:c1:a8:5c:
         d1:38:a7:e7:3e:03:28:2b:7d:2a:16:f5:ea:eb:2b:67:f0:66:
         88:09:e1:0d:2d:fc:24:05:7b:85:53:b2:6c:c4:00:6b:7e:4b:
         98:0f:75:c1:2e:b4:d8:a0:1b:c0:0e:90:58:e8:c2:00:ef:29:
         c2:76:76:3f:1d:c6:61:db:df:cb:ab:bb:27:f9:25:37:e7:de:
         88:96:69:29:c8:ef:93:b1:8e:5e:fc:0c:29:34:09:53:85:73:
         c3:7e:30:ea
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYrSAJOFZMiH4Z83y4JNIF2VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjMwOTI2MTQ1OTI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4M2JmMzNkZDY0YzZmYmM3MzhiZTk1NmM3NGRiYmM3Mjg1MzhmOGFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqLyb1yxziQUm+Wn2M7mEEJYIvF0
08vZ7TmrqmUIk8GB16i9JFBIJAq4ZIms4KfGr8UFqlkB/QSEUzIio21SVBbnx9vq
4s7rm4Bks68sS+0DbVt+ASwoN6Uuvbo2vNkFvOgvhDoEwlhL50xTyHLi1NP9hUOk
BvgLYrbrRYrLuy2sJijHRpWxtZTNDA7uz01t8ADKnIu1MWj9Jd4riPbViu6qSA6I
3QapMuUgByIXRrMvXKQDS+coyyxnjWDXzv5seWiMscj53dqBQ+qsVgtZrai0d9ja
DBu/aBOchR2T47RLoInh9q92xP35V/JlLuHhtTw+mzI16VYnp5TbH4rAqQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFIO/M91kxvvHOL6VbHTbvHKFOPirMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvZzc4ejNXVEctOGM0dnBWc2ROdThjb1U0LUtzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKg6xBxGZ
AwcEKhDMQAJwMA0GCSqGSIb3DQEBCwUAA4IBAQAP92mSHBh6ndDiwNPAfBhAh3cD
f8hHxWzV1mAnuwFX6yrfgzeYEA2EStznL4T9SPOiUmnlY/+qkQRS/yQY48GYtRuD
icZpZzRPHO2BgYZ4bW/8vZzryt85V/gOpshfi8vco6z+kZ4aVbpJEqUo/LZ65Bme
yObeXweoiZr8cCoGGzq/IpVT8IY7FxdKg4zE0ILWVkXSEtRiVcoE9WyTdZ3BqFzR
OKfnPgMoK30qFvXq6ytn8GaICeENLfwkBXuFU7JsxABrfkuYD3XBLrTYoBvADpBY
6MIA7ynCdnY/HcZh29/Lq7sn+SU3596IlmkpyO+TsY5e/AwpNAlThXPDfjDq